Adobe Flash - LMZA Property Decoding Heap Corruption

EDB-ID:

40089

CVE:

2016-4137

EDB Verified:

Author:

Google Security Research

Type:

dos

Exploit: /

Platform:

Multiple

Date:

2016-07-11

Vulnerable App:

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=790

Loading the attached image causes heap corruption due to LMZA property decoding. To reproduce the issue, load the attach file '6' using LoadImage.swf as follows:

LoadImage.swf?img=6

The issue sometimes takes multiple refreshes to crash


Proof of Concept:
https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/40089.zip

Tags:

Advisory/Source: Link

Downloads	Certifications	Training	Professional Services
Kali Linux	OSCP	Penetration Testing with Kali Linux (PWK) ALL NEW for 2020	Penetration Testing
Kali NetHunter	OSEP	Evasion Techniques and breaching Defences (PEN-300) ALL NEW for 2020	Advanced Attack Simulation
Kali Linux Revealed Book	OSWE	Advanced Web Attacks and Exploitation (AWAE) Updated for 2020	Application Security Assessment
	OSWP	Offensive Security Wireless Attacks (WiFu)
	OSEE	Metasploit Unleashed (MSFU)
	KLCP	Free Kali Linux Training